Attendance Tracking
Sign in

Privacy Policy

Draft — last updated October 2026.

This Policy explains what personal data Attendance Tracking (the “Service”, “we”) handles, why, and the choices available. It covers the administrators of our customer companies (“Customers”) and the employees those companies add to the Service.

1. Our role

  • Customer account data (company and administrator details, subscription): we decide how it is used, as the provider of the Service.
  • Employee data entered by a Customer or generated when employees clock in: we process it on behalf of that Customer, who is the employer and decides why it is collected. Employees should direct requests about their data to their employer; we will assist the employer.

2. Data we handle

  • Account data: name, email, phone (optional), password (stored only as a hash), preferred language and role.
  • Company data: company name, contact details, address, time zone, logo, attendance rules, and the plan and subscription status. Card or PayPal account details are handled by PayPal; we do not receive them.
  • Business locations: address, map coordinates and radius of each location.
  • Employee data: name, email, phone and internal code (as entered by the employer), assigned locations and schedules.
  • Attendance records: clock-in and clock-out times (server time), the location of the device at that moment, its reported accuracy, the distance to the business, the source (web or app), and any correction made by an administrator with its reason.
  • Technical data: sessions of the mobile app, IP address in server logs, and an audit log of changes.

3. Location

  • The device location is used only to clock in and out. It is sent to us only when the employee presses the clock-in or clock-out button.
  • While the clock-in screen is open, the device may read the location to show the employee their distance to the business; that reading stays on the device.
  • The Service never tracks location in the background or outside the clock-in screen.
  • Before their first clock-in, each employee is shown a notice about this and must accept it.

4. Why we use the data

  • To provide the Service: verify clock-ins, show records, schedules and reports, and send account emails (invitations, password resets, billing notices).
  • To bill the subscription and prevent fraud and abuse.
  • To keep the Service secure and fix problems.

We do not sell personal data, do not use it for advertising and do not share it with third parties for their own purposes.

5. Service providers

We use providers that process data on our behalf: hosting and database; email delivery (Brevo); maps and address search (Google Maps Platform, which receives the map requests made from the browser or app); and payments (PayPal, for the subscriptions of Customers). They may only use the data to provide their service to us.

6. Cookies and local storage

The web uses only necessary cookies: the session cookie (to keep you signed in), the language and the selected module. There are no advertising or analytics trackers. The mobile app stores its session securely on the device and a local encrypted copy of recent data for offline viewing, which is deleted on sign-out.

7. Retention and deletion

  • Data is kept while the Customer’s account is active. Administrators can correct or void records; voided records are kept for traceability.
  • When the account owner requests deletion, the account is closed immediately and all its data (locations, employees, schedules, attendance records with their locations, users and logs) is deleted after 30 days.
  • Customers can export their data at any time.

8. Security

Data is encrypted in transit (HTTPS). Each company’s data is isolated from the others; passwords are hashed; access is limited by role. No method is completely secure, but we work to protect your data and will notify affected Customers of a breach as required by law.

9. Your rights

Depending on where you live (for example, California under the CCPA/CPRA), you may have rights to know, access, correct or delete your personal data and not to be discriminated against for exercising them. Administrators can update their profile in My account. Employees should contact their employer, who can correct or delete their data in the Service. We do not sell or share personal data for cross-context behavioral advertising.

10. Children

The Service is intended for businesses and their employees and is not directed to children under 13.

11. Changes

We may update this Policy. We will publish the new version with its date and notify account owners of material changes.

12. Contact

Privacy questions or requests: write to attendance@dconext.com, preferably from the email address associated with your account.